@codyswann/lisa 4.60.3 → 4.60.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (100) hide show
  1. package/{scripts/check-workflow-load-failures.ts → all/copy-overwrite/scripts/check-workflow-load-failures.mjs} +36 -76
  2. package/all/copy-overwrite/scripts/lib/reusable-workflow-load-adapter.d.mts +21 -0
  3. package/{dist/core/reusable-workflow-load-adapter.js → all/copy-overwrite/scripts/lib/reusable-workflow-load-adapter.mjs} +50 -41
  4. package/all/copy-overwrite/scripts/lib/reusable-workflow-load-failure.d.mts +29 -0
  5. package/all/copy-overwrite/scripts/lib/reusable-workflow-load-failure.mjs +124 -0
  6. package/all/copy-overwrite/scripts/lib/reusable-workflow-load-scan.d.mts +36 -0
  7. package/all/copy-overwrite/scripts/lib/reusable-workflow-load-scan.mjs +102 -0
  8. package/all/copy-overwrite/scripts/lisa-hooks/block-instruction-file-edits.sh +11 -1
  9. package/all/copy-overwrite/scripts/lisa-hooks/parity-safety-net-heredoc.py +43 -0
  10. package/all/copy-overwrite/scripts/lisa-hooks/parity-safety-net.sh +16 -1
  11. package/all/create-only/.github/workflows/workflow-load-failure-sweep.yml +42 -0
  12. package/dist/core/lisa-owned-hash-ledger.d.ts.map +1 -1
  13. package/dist/core/lisa-owned-hash-ledger.js +72 -0
  14. package/dist/core/lisa-owned-hash-ledger.js.map +1 -1
  15. package/dist/core/nightly-e2e-guard-behavior-certificate.js +2 -2
  16. package/dist/core/upstream-evidence-manifest.d.ts.map +1 -1
  17. package/dist/core/upstream-evidence-manifest.js +28 -13
  18. package/dist/core/upstream-evidence-manifest.js.map +1 -1
  19. package/dist/opencode/plugin-templates/parity-safety-net-heredoc.py +43 -0
  20. package/dist/opencode/plugin-templates/parity-safety-net.sh +16 -1
  21. package/package.json +5 -5
  22. package/plugins/lisa/.claude-plugin/plugin.json +1 -1
  23. package/plugins/lisa/.codex-plugin/plugin.json +1 -1
  24. package/plugins/lisa/hooks/block-instruction-file-edits.sh +11 -1
  25. package/plugins/lisa/hooks/parity-safety-net-heredoc.py +43 -0
  26. package/plugins/lisa/hooks/parity-safety-net.sh +16 -1
  27. package/plugins/lisa-agy/hooks/block-instruction-file-edits.sh +11 -1
  28. package/plugins/lisa-agy/hooks/parity-safety-net-heredoc.py +43 -0
  29. package/plugins/lisa-agy/hooks/parity-safety-net.sh +16 -1
  30. package/plugins/lisa-agy/plugin.json +1 -1
  31. package/plugins/lisa-cdk/.claude-plugin/plugin.json +1 -1
  32. package/plugins/lisa-cdk/.codex-plugin/plugin.json +1 -1
  33. package/plugins/lisa-cdk-agy/plugin.json +1 -1
  34. package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json +1 -1
  35. package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json +1 -1
  36. package/plugins/lisa-copilot/.claude-plugin/plugin.json +1 -1
  37. package/plugins/lisa-copilot/hooks/block-instruction-file-edits.sh +11 -1
  38. package/plugins/lisa-copilot/hooks/parity-safety-net-heredoc.py +43 -0
  39. package/plugins/lisa-copilot/hooks/parity-safety-net.sh +16 -1
  40. package/plugins/lisa-cursor/.claude-plugin/plugin.json +1 -1
  41. package/plugins/lisa-cursor/hooks/block-instruction-file-edits.sh +11 -1
  42. package/plugins/lisa-cursor/hooks/parity-safety-net-heredoc.py +43 -0
  43. package/plugins/lisa-cursor/hooks/parity-safety-net.sh +16 -1
  44. package/plugins/lisa-expo/.claude-plugin/plugin.json +1 -1
  45. package/plugins/lisa-expo/.codex-plugin/plugin.json +1 -1
  46. package/plugins/lisa-expo-agy/plugin.json +1 -1
  47. package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json +1 -1
  48. package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json +1 -1
  49. package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json +1 -1
  50. package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json +1 -1
  51. package/plugins/lisa-harper-fabric-agy/plugin.json +1 -1
  52. package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json +1 -1
  53. package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json +1 -1
  54. package/plugins/lisa-nestjs/.claude-plugin/plugin.json +1 -1
  55. package/plugins/lisa-nestjs/.codex-plugin/plugin.json +1 -1
  56. package/plugins/lisa-nestjs-agy/plugin.json +1 -1
  57. package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json +1 -1
  58. package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json +1 -1
  59. package/plugins/lisa-openclaw/.claude-plugin/plugin.json +1 -1
  60. package/plugins/lisa-openclaw/.codex-plugin/plugin.json +1 -1
  61. package/plugins/lisa-openclaw-agy/plugin.json +1 -1
  62. package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json +1 -1
  63. package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json +1 -1
  64. package/plugins/lisa-phaser/.claude-plugin/plugin.json +1 -1
  65. package/plugins/lisa-phaser/.codex-plugin/plugin.json +1 -1
  66. package/plugins/lisa-phaser-agy/plugin.json +1 -1
  67. package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json +1 -1
  68. package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json +1 -1
  69. package/plugins/lisa-rails/.claude-plugin/plugin.json +1 -1
  70. package/plugins/lisa-rails/.codex-plugin/plugin.json +1 -1
  71. package/plugins/lisa-rails-agy/plugin.json +1 -1
  72. package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json +1 -1
  73. package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json +1 -1
  74. package/plugins/lisa-typescript/.claude-plugin/plugin.json +1 -1
  75. package/plugins/lisa-typescript/.codex-plugin/plugin.json +1 -1
  76. package/plugins/lisa-typescript-agy/plugin.json +1 -1
  77. package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json +1 -1
  78. package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json +1 -1
  79. package/plugins/lisa-wiki/.claude-plugin/plugin.json +1 -1
  80. package/plugins/lisa-wiki/.codex-plugin/plugin.json +1 -1
  81. package/plugins/lisa-wiki-agy/plugin.json +1 -1
  82. package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json +1 -1
  83. package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json +1 -1
  84. package/plugins/src/base/hooks/block-instruction-file-edits.sh +11 -1
  85. package/plugins/src/base/hooks/parity-safety-net-heredoc.py +43 -0
  86. package/plugins/src/base/hooks/parity-safety-net.sh +16 -1
  87. package/scripts/check-workflow-load-failures.mjs +4 -0
  88. package/scripts/two-channel-couplings.json +1 -1
  89. package/typescript/copy-overwrite/.prettierignore +1 -0
  90. package/dist/core/reusable-workflow-load-adapter.d.ts +0 -78
  91. package/dist/core/reusable-workflow-load-adapter.d.ts.map +0 -1
  92. package/dist/core/reusable-workflow-load-adapter.js.map +0 -1
  93. package/dist/core/reusable-workflow-load-failure.d.ts +0 -144
  94. package/dist/core/reusable-workflow-load-failure.d.ts.map +0 -1
  95. package/dist/core/reusable-workflow-load-failure.js +0 -184
  96. package/dist/core/reusable-workflow-load-failure.js.map +0 -1
  97. package/dist/core/reusable-workflow-load-scan.d.ts +0 -92
  98. package/dist/core/reusable-workflow-load-scan.d.ts.map +0 -1
  99. package/dist/core/reusable-workflow-load-scan.js +0 -108
  100. package/dist/core/reusable-workflow-load-scan.js.map +0 -1
@@ -229,6 +229,46 @@ def shell_tokens(prefix: str) -> list[str] | None:
229
229
  return None
230
230
 
231
231
 
232
+ def literal_display_projection(command: str) -> str:
233
+ """Remove data from one literal printer, retaining its real output target.
234
+
235
+ Reuse the literal simple-command grammar: pipes, chains, substitutions,
236
+ comments and ambiguous syntax keep the original scan. This is not a shell
237
+ parser or an execution exemption. ANSI-C quoting and computed targets also
238
+ keep their original scan rather than guessing their expanded spelling.
239
+ """
240
+ if "$'" in command:
241
+ return command
242
+
243
+ def printer(text: str) -> bool:
244
+ tokens = shell_tokens(text)
245
+ if not tokens or len(tokens) < 2:
246
+ return False
247
+ if tokens[0] == "echo":
248
+ return True
249
+ if tokens[0] != "printf":
250
+ return False
251
+ arguments = tokens[2:] if tokens[1] == "--" else tokens[1:]
252
+ if not arguments or arguments[0].startswith("-"):
253
+ return False
254
+ # %n writes a variable (including an evaluated array subscript), and a
255
+ # dynamic format could select it. Only known display conversions qualify.
256
+ remaining = re.sub(r"%%|%[sbqQ]", "", arguments[0])
257
+ return not any(char in remaining for char in "%$`*?[]~")
258
+
259
+ if printer(command):
260
+ return "printf '%s' literal-display-content"
261
+ for redirect in re.finditer(r">>|>\||>", command):
262
+ if not printer(command[:redirect.start()]):
263
+ continue
264
+ target = shell_tokens(command[redirect.end():])
265
+ if target and len(target) == 1 and not any(
266
+ char in target[0] for char in "$`\\\n\r*?[]~"
267
+ ):
268
+ return "printf '%s' literal-display-content " + redirect[0] + " " + shlex.quote(target[0])
269
+ return command
270
+
271
+
232
272
  def is_allowed_gh(tokens: list[str]) -> bool:
233
273
  return (
234
274
  len(tokens) >= 3
@@ -905,6 +945,9 @@ def marker_is_closed(command: str, marker: Marker) -> bool:
905
945
 
906
946
  def main() -> int:
907
947
  command = sys.stdin.read()
948
+ if sys.argv[1:] == ["--literal-display"]:
949
+ print(literal_display_projection(command), end="")
950
+ return SAFE
908
951
  if "<<" not in command:
909
952
  print(command, end="")
910
953
  return SAFE
@@ -431,6 +431,18 @@ case "$command_str" in
431
431
  ;;
432
432
  esac
433
433
 
434
+ custom_command_for_guards="$command_for_guards"
435
+ # A single literal printer writes data, not shell commands. Keep its actual
436
+ # redirection in the scan; unsupported syntax and unavailable parsing retain
437
+ # the original text. Chained commands and shell substitutions never qualify.
438
+ if [[ "$command_for_guards" =~ ^[[:blank:]]*(printf|echo)[[:blank:]] ]] \
439
+ && command -v python3 >/dev/null 2>&1; then
440
+ if display_projection="$(printf '%s' "$command_for_guards" | python3 \
441
+ "$lisa_guard_hook_dir/parity-safety-net-heredoc.py" --literal-display 2>/dev/null)"; then
442
+ command_for_guards="$display_projection"
443
+ fi
444
+ fi
445
+
434
446
  # ─── Follow execution into the file a command RUNS (issue #3612) ─────────────
435
447
  #
436
448
  # Every guard below classifies SHELL COMMAND TEXT, and until this block existed
@@ -2380,6 +2392,9 @@ fi
2380
2392
  # 16. Project-local custom rules. Each non-comment line is an ERE; a match blocks.
2381
2393
  rules_file="${SAFETY_NET_RULES_FILE:-${CLAUDE_PROJECT_DIR:-$PWD}/.claude/safety-net-rules.txt}"
2382
2394
  if [ -f "$rules_file" ]; then
2395
+ # Custom rules can intentionally govern text itself, so preserve their input.
2396
+ custom_command_str="$(printf '%s\n%s' "$custom_command_for_guards" "$followed_text" \
2397
+ | awk '{ if (sub(/\\$/, "")) printf "%s ", $0; else print }')"
2383
2398
  while IFS= read -r rule || [ -n "$rule" ]; do
2384
2399
  case "$rule" in
2385
2400
  '' | '#'*) continue ;;
@@ -2393,7 +2408,7 @@ if [ -f "$rules_file" ]; then
2393
2408
  # not a refusal. The `||` puts the pipeline in a condition context, where
2394
2409
  # a non-zero status is expected rather than fatal.
2395
2410
  rule_status=0
2396
- printf '%s' "$normalized_command_str" | grep -Eiq -- "$rule" || rule_status=$?
2411
+ printf '%s' "$custom_command_str" | grep -Eiq -- "$rule" || rule_status=$?
2397
2412
  case "$rule_status" in
2398
2413
  0) block "matched a project custom safety rule (${rules_file##*/}): $rule" ;;
2399
2414
  1) ;; # no match
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-expo",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-expo",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Expo and React Native-specific skills, agents, rules, and MCP servers.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-expo",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-expo",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-expo",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Expo/React Native-specific skills, agents, rules, and MCP servers",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-harper-fabric",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Harper/Fabric-specific rules for TypeScript component apps",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-harper-fabric",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Harper/Fabric-specific Lisa rules for TypeScript component apps.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-harper-fabric",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Harper/Fabric-specific rules for TypeScript component apps",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-harper-fabric",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Harper/Fabric-specific rules for TypeScript component apps",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-harper-fabric",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Harper/Fabric-specific rules for TypeScript component apps",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-nestjs",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-nestjs",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "NestJS-specific skills and migration write-protection hooks.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-nestjs",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-nestjs",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-nestjs",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "NestJS-specific skills (GraphQL, TypeORM) and hooks (migration write-protection)",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-openclaw",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-openclaw",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-openclaw",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-openclaw",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-openclaw",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-phaser",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Phaser 4 game-development rules for TypeScript projects",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-phaser",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Phaser 4 game-development rules for TypeScript projects",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-phaser",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Phaser 4 game-development rules for TypeScript projects",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-phaser",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Phaser 4 game-development rules for TypeScript projects",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-phaser",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Phaser 4 game-development rules for TypeScript projects",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-rails",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-rails",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Ruby on Rails-specific skills and hooks for RuboCop and ast-grep scanning on edit.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-rails",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-rails",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-rails",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Ruby on Rails-specific hooks — RuboCop linting/formatting and ast-grep scanning on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-typescript",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-typescript",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "TypeScript-specific hooks for formatting, linting, and ast-grep scanning on edit.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-typescript",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-typescript",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-typescript",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "TypeScript-specific hooks — Prettier formatting, ESLint linting, ast-grep scanning, and error-suppression blocking on edit",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-wiki",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-wiki",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-wiki",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-wiki",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "lisa-wiki",
3
- "version": "4.60.3",
3
+ "version": "4.60.5",
4
4
  "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
5
5
  "author": {
6
6
  "name": "Cody Swann"
@@ -49,7 +49,8 @@ if [ -r "$lisa_guard_dedupe_lib" ]; then
49
49
  # shellcheck source=guard-dedupe.bash
50
50
  . "$lisa_guard_dedupe_lib"
51
51
  trap 'lisa_guard_dedupe_record $?' EXIT
52
- lisa_guard_dedupe block-instruction-file-edits "$input"
52
+ lisa_guard_dedupe block-instruction-file-edits "$input" \
53
+ "$lisa_guard_hook_dir/parity-safety-net-heredoc.py"
53
54
  fi
54
55
 
55
56
  command -v jq >/dev/null 2>&1 || exit 0
@@ -184,6 +185,15 @@ EOF
184
185
  grep -Eqi '(agents|claude|copilot-instructions)\.md'; then
185
186
  exit 0
186
187
  fi
188
+ # Literal printf/echo arguments are content. The shared projection keeps
189
+ # the real redirect target, and leaves executable/ambiguous syntax intact.
190
+ if [[ "$command_str" =~ ^[[:blank:]]*(printf|echo)[[:blank:]] ]] \
191
+ && command -v python3 >/dev/null 2>&1; then
192
+ if display_projection="$(printf '%s' "$command_str" | python3 \
193
+ "$lisa_guard_hook_dir/parity-safety-net-heredoc.py" --literal-display 2>/dev/null)"; then
194
+ command_str="$display_projection"
195
+ fi
196
+ fi
187
197
  # Write signatures only. A bare mention (`cat AGENTS.md`, `rg x AGENTS.md`)
188
198
  # is a read and must stay allowed — the filename has to appear as the target
189
199
  # of a redirection, a tee, or an in-place sed.
@@ -226,6 +226,46 @@ def shell_tokens(prefix: str) -> list[str] | None:
226
226
  return None
227
227
 
228
228
 
229
+ def literal_display_projection(command: str) -> str:
230
+ """Remove data from one literal printer, retaining its real output target.
231
+
232
+ Reuse the literal simple-command grammar: pipes, chains, substitutions,
233
+ comments and ambiguous syntax keep the original scan. This is not a shell
234
+ parser or an execution exemption. ANSI-C quoting and computed targets also
235
+ keep their original scan rather than guessing their expanded spelling.
236
+ """
237
+ if "$'" in command:
238
+ return command
239
+
240
+ def printer(text: str) -> bool:
241
+ tokens = shell_tokens(text)
242
+ if not tokens or len(tokens) < 2:
243
+ return False
244
+ if tokens[0] == "echo":
245
+ return True
246
+ if tokens[0] != "printf":
247
+ return False
248
+ arguments = tokens[2:] if tokens[1] == "--" else tokens[1:]
249
+ if not arguments or arguments[0].startswith("-"):
250
+ return False
251
+ # %n writes a variable (including an evaluated array subscript), and a
252
+ # dynamic format could select it. Only known display conversions qualify.
253
+ remaining = re.sub(r"%%|%[sbqQ]", "", arguments[0])
254
+ return not any(char in remaining for char in "%$`*?[]~")
255
+
256
+ if printer(command):
257
+ return "printf '%s' literal-display-content"
258
+ for redirect in re.finditer(r">>|>\||>", command):
259
+ if not printer(command[:redirect.start()]):
260
+ continue
261
+ target = shell_tokens(command[redirect.end():])
262
+ if target and len(target) == 1 and not any(
263
+ char in target[0] for char in "$`\\\n\r*?[]~"
264
+ ):
265
+ return "printf '%s' literal-display-content " + redirect[0] + " " + shlex.quote(target[0])
266
+ return command
267
+
268
+
229
269
  def is_allowed_gh(tokens: list[str]) -> bool:
230
270
  return (
231
271
  len(tokens) >= 3
@@ -902,6 +942,9 @@ def marker_is_closed(command: str, marker: Marker) -> bool:
902
942
 
903
943
  def main() -> int:
904
944
  command = sys.stdin.read()
945
+ if sys.argv[1:] == ["--literal-display"]:
946
+ print(literal_display_projection(command), end="")
947
+ return SAFE
905
948
  if "<<" not in command:
906
949
  print(command, end="")
907
950
  return SAFE
@@ -428,6 +428,18 @@ case "$command_str" in
428
428
  ;;
429
429
  esac
430
430
 
431
+ custom_command_for_guards="$command_for_guards"
432
+ # A single literal printer writes data, not shell commands. Keep its actual
433
+ # redirection in the scan; unsupported syntax and unavailable parsing retain
434
+ # the original text. Chained commands and shell substitutions never qualify.
435
+ if [[ "$command_for_guards" =~ ^[[:blank:]]*(printf|echo)[[:blank:]] ]] \
436
+ && command -v python3 >/dev/null 2>&1; then
437
+ if display_projection="$(printf '%s' "$command_for_guards" | python3 \
438
+ "$lisa_guard_hook_dir/parity-safety-net-heredoc.py" --literal-display 2>/dev/null)"; then
439
+ command_for_guards="$display_projection"
440
+ fi
441
+ fi
442
+
431
443
  # ─── Follow execution into the file a command RUNS (issue #3612) ─────────────
432
444
  #
433
445
  # Every guard below classifies SHELL COMMAND TEXT, and until this block existed
@@ -2377,6 +2389,9 @@ fi
2377
2389
  # 16. Project-local custom rules. Each non-comment line is an ERE; a match blocks.
2378
2390
  rules_file="${SAFETY_NET_RULES_FILE:-${CLAUDE_PROJECT_DIR:-$PWD}/.claude/safety-net-rules.txt}"
2379
2391
  if [ -f "$rules_file" ]; then
2392
+ # Custom rules can intentionally govern text itself, so preserve their input.
2393
+ custom_command_str="$(printf '%s\n%s' "$custom_command_for_guards" "$followed_text" \
2394
+ | awk '{ if (sub(/\\$/, "")) printf "%s ", $0; else print }')"
2380
2395
  while IFS= read -r rule || [ -n "$rule" ]; do
2381
2396
  case "$rule" in
2382
2397
  '' | '#'*) continue ;;
@@ -2390,7 +2405,7 @@ if [ -f "$rules_file" ]; then
2390
2405
  # not a refusal. The `||` puts the pipeline in a condition context, where
2391
2406
  # a non-zero status is expected rather than fatal.
2392
2407
  rule_status=0
2393
- printf '%s' "$normalized_command_str" | grep -Eiq -- "$rule" || rule_status=$?
2408
+ printf '%s' "$custom_command_str" | grep -Eiq -- "$rule" || rule_status=$?
2394
2409
  case "$rule_status" in
2395
2410
  0) block "matched a project custom safety rule (${rules_file##*/}): $rule" ;;
2396
2411
  1) ;; # no match
@@ -0,0 +1,4 @@
1
+ #!/usr/bin/env node
2
+ import { runCli } from "../all/copy-overwrite/scripts/check-workflow-load-failures.mjs";
3
+
4
+ runCli();
@@ -97,7 +97,7 @@
97
97
  "workflows": 23,
98
98
  "steps": 781,
99
99
  "couplings": 33,
100
- "inventory": 80
100
+ "inventory": 87
101
101
  },
102
102
  "counts": {
103
103
  "package-backed": 10,
@@ -77,6 +77,7 @@ scripts/check-third-party-action-pins.mjs
77
77
  scripts/check-third-party-review-evidence.mjs
78
78
  scripts/check-threshold-ratchet.mjs
79
79
  scripts/check-verification-coverage.mjs
80
+ scripts/check-workflow-load-failures.mjs
80
81
  scripts/classify-maestro-failures.mjs
81
82
  scripts/lisa-command-envelope.mjs
82
83
  scripts/lisa-commit-msg-gates.mjs